How Simman Solicitors collects, uses, stores, and protects your personal data — in full compliance with UK GDPR and the Data Protection Act 2018.
Last updated: January 2024 · Reviewed annually
⚖️ Simman Solicitors is authorised and regulated by the Solicitors Regulation Authority (SRA ID: 342119 / Branch ID: 8014732). We are registered as a Data Controller with the Information Commissioner's Office (ICO). We take your privacy and data protection rights extremely seriously.
Simman Solicitors ("the Firm", "we", "us", "our") is a solicitors' firm with offices at:
We act as the Data Controller for all personal data processed in connection with the provision of legal services. For data protection queries, contact us at legal@simmansolicitors.org.uk or call 020 8686 1085.
We collect and process the following categories of personal data:
We only collect data that is necessary and proportionate for the purpose of providing you with legal services.
We rely on the following legal bases under UK GDPR Article 6:
| Legal Basis | When We Use It |
|---|---|
| Contract performance | Processing necessary to provide the legal services you have instructed us to carry out |
| Legal obligation | Regulatory compliance with SRA, Legal Aid Agency, HMRC, and anti-money laundering requirements |
| Legitimate interests | Running and improving our practice, managing client relationships, preventing fraud |
| Consent | Where we send you marketing or contact you for non-case purposes (you may withdraw at any time) |
For special category data (Article 9), we rely on the basis of legal claims — processing is necessary for the establishment, exercise, or defence of legal claims on your behalf.
We will never sell your personal data to third parties, nor use it for unsolicited marketing without your explicit consent.
We may share your data with the following parties where necessary for your case or required by law:
All third parties we share data with are required to handle it lawfully and in accordance with data protection law.
📁 In accordance with Legal Aid Agency (LAA) requirements and SRA guidelines, we retain all client files and associated personal data for a period of 6 years after the closure of your file. After this period, files and data are securely and permanently destroyed in accordance with our Data Destruction Policy.
| Type of Record | Retention Period | Basis |
|---|---|---|
| Client matter files (Legal Aid) | 6 years after file closure | LAA contractual requirement & SRA guidelines |
| Client matter files (Private) | 6 years after file closure | SRA guidelines & limitation periods |
| Financial and billing records | 7 years | HMRC / Companies Act requirements |
| Anti-money laundering records | 5 years | Money Laundering Regulations 2017 |
| Will and property documents | Indefinitely or as instructed | Client instructions |
| Website enquiry data | 12 months | Legitimate interests |
When retention periods expire, data is destroyed securely — paper records are shredded, and electronic records are permanently deleted. Destruction is logged and recorded.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay.
Where your matter requires us to share data internationally (for example, with embassies, overseas courts, or country experts), we will only do so where lawful safeguards are in place. We will inform you of any such transfer where appropriate.
You have the following rights in relation to your personal data:
| Right | What This Means |
|---|---|
| Right of access | Request a copy of the personal data we hold about you (Subject Access Request) |
| Right to rectification | Ask us to correct inaccurate or incomplete data |
| Right to erasure | Ask us to delete your data in certain circumstances (note: this may not apply where we have legal obligations to retain it) |
| Right to restrict processing | Ask us to limit how we use your data in certain circumstances |
| Right to data portability | Receive your data in a portable format where technically feasible |
| Right to object | Object to processing based on legitimate interests |
| Rights re: automated decisions | We do not make solely automated decisions about you |
To exercise any of these rights, contact us at legal@simmansolicitors.org.uk. We will respond within one calendar month.
If you believe we have not handled your personal data correctly, you have the right to complain to the Information Commissioner's Office (ICO):
We would however ask that you contact us first so we can try to resolve any concerns directly.
We review and update this policy at least annually or whenever there is a significant change in law or our practices. The current version is always available on our website. Continued use of our services after any update constitutes acceptance of the revised policy.